
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: wmvT6pzD6/oqru9f6fCL3l7lp9O3tsPwAwpxPyb5u7g=
Subject key identifier: 1D:4B:99:4A:E5:9A:EE:C6:E3:F6:81:72:1D:BB:EE:87:68:A8:2D:F5
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 019D390A5D5EDFE2CA806BAE4136BE88D637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 1365
Signing time: Sun 29 Mar 2026 10:01:13 +0000
Manifest this update: Sun 29 Mar 2026 10:01:13 +0000
Manifest next update: Mon 30 Mar 2026 10:01:13 +0000
Files and hashes: 1: LaPWaYnRdzPOHVggeMAoRuWpL4k.roa (hash: CbyTkBWUaIRYJheYloFSm5P53K+AiwdJChkgXRTNeqo=)
2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: a0jcdOF/KT6AFZevQl+n++DxTjDmiYIes6FNQkj6bLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5d:5e:df:e2:ca:80:6b:ae:41:36:be:88:d6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Mar 29 10:01:13 2026 GMT
Not After : Mar 30 10:01:13 2026 GMT
Subject: CN=1d4b994ae59aeec6e3f681721dbbee8768a82df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:3b:3b:06:81:ff:83:e9:87:d9:02:79:12:
cb:b9:30:5c:de:5a:ff:dc:1b:28:96:9e:4c:e8:34:
e6:48:42:2c:dd:f2:00:fc:1f:5c:1c:3a:f4:a3:21:
79:3e:c5:39:cb:96:46:fd:a6:7d:dd:7f:28:1c:83:
2f:dc:00:0b:84:4e:75:ae:94:d9:08:42:d5:36:68:
98:95:7a:6b:9b:a7:be:7e:47:ae:57:95:84:e0:b2:
0a:33:ff:9e:db:b7:15:e1:81:08:47:77:d7:3e:4a:
7b:af:d5:66:6f:91:83:02:36:64:94:8e:bd:54:2d:
9e:41:98:a5:71:70:47:b1:d1:f1:46:fc:85:be:a3:
95:20:d1:13:0f:78:5c:b5:4b:41:b5:db:19:23:bb:
2e:da:72:82:d1:c5:9d:c3:8b:5d:bb:44:46:12:7b:
93:7b:94:b9:c2:b3:27:e3:ca:6d:ef:f9:14:f3:cd:
58:b7:bc:8e:77:f9:ae:74:8a:9f:65:20:f0:9a:ae:
06:a4:da:7a:65:b6:bd:38:8d:4c:7e:6e:60:3b:9c:
b3:79:ea:bf:7e:0e:b2:cd:0c:fe:57:44:a3:f4:57:
18:b5:22:08:b9:c4:8f:c3:31:27:50:d7:78:3e:e1:
f1:7e:e6:b7:be:b3:a4:f3:aa:7d:4c:bd:95:7f:bd:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4B:99:4A:E5:9A:EE:C6:E3:F6:81:72:1D:BB:EE:87:68:A8:2D:F5
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d3:93:81:2c:b4:8e:6a:7e:06:04:9b:9c:13:f2:a8:9d:bf:
1f:19:34:df:b1:af:3d:fb:c9:cb:9a:5a:68:ee:47:58:8b:15:
3a:57:09:2e:50:41:99:00:e6:75:96:33:df:f6:20:c4:b8:72:
ca:d1:15:42:53:a0:e6:b2:aa:a8:9b:45:96:b0:5f:a7:4a:97:
ea:a9:c3:5a:9c:72:b9:84:2e:08:c7:1d:5c:a6:3a:6c:70:2d:
67:c2:e2:cf:74:0f:97:a4:c2:7f:d4:30:31:e9:a7:32:75:e4:
f4:fb:27:9b:a8:ea:44:f3:fe:60:85:4c:72:9d:fa:c8:7b:e0:
4b:0f:7c:50:2c:bc:bf:d7:af:8b:0b:3b:36:b7:f2:cc:63:b6:
bc:05:0f:8a:0e:47:f5:91:e6:8f:53:d9:69:e7:6b:89:39:ab:
39:64:3e:f3:ff:e9:2e:f8:a9:7c:65:89:c2:be:16:82:82:ea:
b8:f9:b5:e6:2d:06:17:6b:67:8e:bb:52:be:1f:cd:74:d5:cc:
ac:02:6c:7d:3b:63:32:fc:b7:c7:7d:b2:02:f1:56:55:4c:53:
6d:bb:2c:5e:0b:0b:d1:06:2d:79:5c:39:cc:ef:f3:1f:08:b1:
4e:59:45:22:ad:5f:0e:20:2d:c1:06:a0:7d:df:77:f6:8c:58:
7a:85:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client